:private_ip_addresses - (Array<) One or more IP addresses to be assigned as a secondary private IP address to the network interface. You can't specify this parameter when also specifying a number of secondary IP addresses. If you don't specify an IP address, Amazon EC2 automatically selects an IP address within the subnet range.

:secondary_private_ip_address_count - (Integer) The number of secondary IP addresses to assign to the network interface. You can't specify this parameter when also specifying private IP addresses.

:allow_reassignment - (Boolean) Indicates whether to allow an IP address that is already assigned to another network interface or instance to be reassigned to the specified network interface.

:instance_id - (String) The ID of the instance. This is required for EC2-Classic. For EC2-VPC, you can specify either the instance ID or the network interface ID, but not both. The operation fails if you specify an instance ID unless exactly one network interface is attached.

:public_ip - (String) The Elastic IP address. This is required for EC2-Classic.

:allocation_id - (String) [EC2-VPC] The allocation ID. This is required for EC2-VPC.

:network_interface_id - (String) [EC2-VPC] The ID of the network interface. If the instance has more than one network interface, you must specify a network interface ID.

:private_ip_address - (String) [EC2-VPC] The primary or secondary private IP address to associate with the Elastic IP address. If no private IP address is specified, the Elastic IP address is associated with the primary private IP address.

:allow_reassociation - (Boolean) [EC2-VPC] Allows an Elastic IP address that is already associated with an instance or network interface to be re-associated with the specified instance or network interface. Otherwise, the operation fails. Default: false

:ip_permissions - (Array<) A set of IP permissions. You can't specify a destination security group and a CIDR IP address range.

:ip_protocol - (String) The protocol. When you call DescribeSecurityGroups, the protocol value returned is the number. Exception: For TCP, UDP, and ICMP, the value returned is the name (for example, tcp, udp, or icmp). For a list of protocol numbers, see Protocol Numbers.

:from_port - (Integer) The start of port range for the TCP and UDP protocols, or an ICMP type number. A value of -1 indicates all ICMP types.

:to_port - (Integer) The end of port range for the TCP and UDP protocols, or an ICMP code. A value of -1 indicates all ICMP codes for the specified ICMP type.

:user_id_group_pairs - (Array<) One or more security group and AWS account ID pairs.

:user_id - (String) The ID of an AWS account.

:group_name - (String) The ID of the security group owned by the specified AWS account.

:group_id - (String) The name of the security group in the specified AWS account.

:ip_ranges - (Array<) One or more IP ranges.

:cidr_ip - (String) The CIDR range. You can either specify a CIDR range or a source security group, not both.

:ip_permissions - (Array<) A set of IP permissions. You can't specify a source security group and a CIDR IP address range.

:ip_protocol - (String) The protocol. When you call DescribeSecurityGroups, the protocol value returned is the number. Exception: For TCP, UDP, and ICMP, the value returned is the name (for example, tcp, udp, or icmp). For a list of protocol numbers, see Protocol Numbers.

:from_port - (Integer) The start of port range for the TCP and UDP protocols, or an ICMP type number. A value of -1 indicates all ICMP types.

:to_port - (Integer) The end of port range for the TCP and UDP protocols, or an ICMP code. A value of -1 indicates all ICMP codes for the specified ICMP type.

:user_id_group_pairs - (Array<) One or more security group and AWS account ID pairs.

:user_id - (String) The ID of an AWS account.

:group_name - (String) The ID of the security group owned by the specified AWS account.

:group_id - (String) The name of the security group in the specified AWS account.

:ip_ranges - (Array<) One or more IP ranges.

:cidr_ip - (String) The CIDR range. You can either specify a CIDR range or a source security group, not both.

:storage - required - (Hash) The bucket in which to store the AMI. You can specify a bucket that you already own or a new bucket that Amazon EC2 creates on your behalf. If you specify a bucket that belongs to someone else, Amazon EC2 returns an error.

:s3 - (Hash) An Amazon S3 storage location.

:bucket - (String) The bucket in which to store the AMI. You can specify a bucket that you already own or a new bucket that Amazon EC2 creates on your behalf. If you specify a bucket that belongs to someone else, Amazon EC2 returns an error.

:prefix - (String) The beginning of the file name of the AMI.

:aws_access_key_id - (String) The access key ID of the owner of the bucket. Before you specify a value for your access key ID, review and follow the guidance in Best Practices for Managing AWS Access Keys.

:source_region - required - (String) The name of the region that contains the AMI to copy.

:source_image_id - required - (String) The ID of the AMI to copy.

:name - required - (String) The name of the new AMI in the destination region.

:description - (String) A description for the new AMI in the destination region.

:client_token - (String) Unique, case-sensitive identifier you provide to ensure idempotency of the request. For more information, see How to Ensure Idempotency in the Amazon Elastic Compute Cloud User Guide.

:description - (String) A description for the new Amazon EBS snapshot.

:destination_region - (String) The destination region of the snapshot copy operation. This parameter is required in the PresignedUrl.

:presigned_url - (String) The pre-signed URL that facilitates copying an encrypted snapshot. This parameter is only required when copying an encrypted snapshot with the Amazon EC2 Query API; it is available as an optional parameter in all other cases. The PresignedUrl should use the snapshot source endpoint, the CopySnapshot action, and include the SourceRegion, SourceSnapshotId, and DestinationRegion parameters. The PresignedUrl must be signed using AWS Signature Version 4. Because Amazon EBS snapshots are stored in Amazon S3, the signing algorithm for this parameter uses the same logic that is described in Authenticating Requests by Using Query Parameters (AWS Signature Version 4) in the Amazon Simple Storage Service API Reference. An invalid or improperly signed PresignedUrl will cause the copy operation to fail asynchronously, and the snapshot will move to an error state.

:no_reboot - (Boolean) By default, this parameter is set to false , which means Amazon EC2 attempts to shut down the instance cleanly before image creation and then reboots the instance. When the parameter is set to true , Amazon EC2 doesn't shut down the instance before creating the image. When this option is used, file system integrity on the created image can't be guaranteed.

:block_device_mappings - (Array<) Information about one or more block device mappings.

:virtual_name - (String) The virtual device name (ephemeral[0..3]). The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume. Constraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI.

:device_name - (String) The device name exposed to the instance (for example, /dev/sdh).

:ebs - (Hash) Parameters used to automatically set up Amazon EBS volumes when the instance is launched.

:snapshot_id - (String) The ID of the snapshot.

:volume_size - (Integer) The size of the volume, in GiB. Constraints: If the volume type is io1, the minimum size of the volume is 10 GiB; otherwise, the minimum size is 1 GiB. The maximum volume size is 1024 GiB. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size. Default: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.

:iops - (Integer) The number of I/O operations per second (IOPS) that the volume supports. For Provisioned IOPS (SSD) volumes, this represents the number of IOPS that are provisioned for the volume. For General Purpose (SSD) volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information on General Purpose (SSD) baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types in the Amazon Elastic Compute Cloud User Guide. Constraint: Range is 100 to 4000 for Provisioned IOPS (SSD) volumes and 3 to 3072 for General Purpose (SSD) volumes. Condition: This parameter is required for requests to create io1 volumes; it is not used in requests to create standard or gp2 volumes.

:encrypted - (Boolean) Indicates whether the Amazon EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to instances that support Amazon EBS encryption.

:no_device - (String) Suppresses the specified device included in the block device mapping of the AMI.

:subnet_id - required - (String) The ID of the subnet to associate with the network interface.

:description - (String) A description for the network interface.

:private_ip_address - (String) The primary private IP address of the network interface. If you don't specify an IP address, Amazon EC2 selects one for you from the subnet range. If you specify an IP address, you cannot indicate any IP addresses specified in privateIpAddresses as primary (only one IP address can be designated as primary).

:groups - (Array<) The IDs of one or more security groups.

:private_ip_addresses - (Array<) One or more private IP addresses.

:private_ip_address - required - (String) The private IP addresses.

:primary - (Boolean) Indicates whether the private IP address is the primary private IP address. Only one IP address can be designated as primary.

:secondary_private_ip_address_count - (Integer) The number of secondary private IP addresses to assign to a network interface. When you specify a number of secondary IP addresses, Amazon EC2 selects these IP addresses within the subnet range. You can't specify this option and specify more than one private IP address using privateIpAddresses. The number of IP addresses you can assign to a network interface varies by instance type. For more information, see Private IP Addresses Per ENI Per Instance Type in the Amazon Elastic Compute Cloud User Guide.

:instance_count - required - (Integer) The number of instances that are a part of a Reserved Instance account to be listed in the Reserved Instance Marketplace. This number should be less than or equal to the instance count associated with the Reserved Instance ID specified in this call.

:price_schedules - required - (Array<) A list specifying the price of the Reserved Instance for each month remaining in the Reserved Instance term.

:term - (Integer) The number of months remaining in the reservation. For example, 2 is the second to the last month before the capacity reservation expires.

:price - (Float) The fixed price for the term.

:currency_code - (String) The currency for transacting the Reserved Instance resale. At this time, the only supported currency is USD. Valid values include:

:resources - required - (Array<) The IDs of one or more resources to tag. For example, ami-1a2b3c4d.

:tags - required - (Array<) One or more tags. The value parameter is required, but if you don't want the tag to have a value, specify the parameter with no value, and we set the value to an empty string.

:key - (String) The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:

:value - (String) The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 255 Unicode characters.

:size - (Integer) The size of the volume, in GiBs. Constraints: If the volume type is io1, the minimum size of the volume is 10 GiB. Default: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.

:snapshot_id - (String) The snapshot from which to create the volume.

:availability_zone - required - (String) The Availability Zone in which to create the volume. Use DescribeAvailabilityZones to list the Availability Zones that are currently available to you.

:instance_tenancy - (String) The supported tenancy options for instances launched into the VPC. A value of default means that instances can be launched with any tenancy; a value of dedicated means all instances launched into the VPC are launched as dedicated tenancy instances regardless of the tenancy assigned to the instance at launch. Dedicated tenancy instances run on single-tenant hardware. Default: default Valid values include:

:resources - required - (Array<) The ID of the resource. For example, ami-1a2b3c4d. You can specify more than one resource ID.

:tags - (Array<) One or more tags to delete. If you omit the value parameter, we delete the tag regardless of its value. If you specify this parameter with an empty string as the value, we delete the key only if its value is an empty string.

:key - (String) The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:

:value - (String) The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 255 Unicode characters.

:filters - (Array<) One or more filters. Filter names and values are case-sensitive. allocation-id - [EC2-VPC] The allocation ID for the address. association-id - [EC2-VPC] The association ID for the address. domain - Indicates whether the address is for use in EC2-Classic (standard) or in a VPC (vpc). instance-id - The ID of the instance the address is associated with, if any. network-interface-id - [EC2-VPC] The ID of the network interface that the address is associated with, if any. network-interface-owner-id - The AWS account ID of the owner. private-ip-address - [EC2-VPC] The private IP address associated with the Elastic IP address. public-ip - The Elastic IP address.

:filters - (Array<) One or more filters. message - Information about the Availability Zone. region-name - The name of the region for the Availability Zone (for example, us-east-1). state - The state of the Availability Zone (available | impaired | unavailable). zone-name - The name of the Availability Zone (for example, us-east-1a).

:filters - (Array<) One or more filters. bundle-id - The ID of the bundle task. error-code - If the task failed, the error code returned. error-message - If the task failed, the error message returned. instance-id - The ID of the instance. progress - The level of task completion, as a percentage (for example, 20%). s3-bucket - The Amazon S3 bucket to store the AMI. s3-prefix - The beginning of the AMI name. start-time - The time the task started (for example, 2013-09-15T17:15:20.000Z). state - The state of the task (pending | waiting-for-shutdown | bundling | storing | cancelling | complete | failed). update-time - The time of the most recent update for the task.

:filters - (Array<) One or more filters. bgp-asn - The customer gateway's Border Gateway Protocol (BGP) Autonomous System Number (ASN). customer-gateway-id - The ID of the customer gateway. ip-address - The IP address of the customer gateway's Internet-routable external interface. state - The state of the customer gateway (pending | available | deleting | deleted). type - The type of customer gateway. Currently, the only supported type is ipsec.1. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter.

:dhcp_options_ids - (Array<) The IDs of one or more DHCP options sets. Default: Describes all your DHCP options sets.

:filters - (Array<) One or more filters. dhcp-options-id - The ID of a set of DHCP options. key - The key for one of the options (for example, domain-name). value - The value for one of the options. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter.

:image_ids - (Array<) One or more image IDs. Default: Describes all images available to you.

:owners - (Array<) Filters the images by the owner. Specify an AWS account ID, amazon (owner is Amazon), aws-marketplace (owner is AWS Marketplace), self (owner is the sender of the request), or all (all owners).

:executable_users - (Array<) Scopes the images by users with explicit launch permissions. Specify an AWS account ID, self (the sender of the request), or all (public AMIs).

:filters - (Array<) One or more filters. architecture - The image architecture (i386 | x86_64). block-device-mapping.delete-on-termination - A Boolean value that indicates whether the Amazon EBS volume is deleted on instance termination. block-device-mapping.device-name - The device name for the Amazon EBS volume (for example, /dev/sdh). block-device-mapping.snapshot-id - The ID of the snapshot used for the Amazon EBS volume. block-device-mapping.volume-size - The volume size of the Amazon EBS volume, in GiB. block-device-mapping.volume-type - The volume type of the Amazon EBS volume (gp2 | standard | io1). description - The description of the image (provided during image creation). hypervisor - The hypervisor type (ovm | xen). image-id - The ID of the image. image-type - The image type (machine | kernel | ramdisk). is-public - A Boolean that indicates whether the image is public. kernel-id - The kernel ID. manifest-location - The location of the image manifest. name - The name of the AMI (provided during image creation). owner-alias - The AWS account alias (for example, amazon). owner-id - The AWS account ID of the image owner. platform - The platform. To only list Windows-based AMIs, use windows. product-code - The product code. product-code.type - The type of the product code (devpay | marketplace). ramdisk-id - The RAM disk ID. root-device-name - The name of the root device volume (for example, /dev/sda1). root-device-type - The type of the root device volume (ebs | instance-store). state - The state of the image (available | pending | failed). state-reason-code - The reason code for the state change. state-reason-message - The message for the state change. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. virtualization-type - The virtualization type (paravirtual | hvm).

:filters - (Array<) One or more filters. availability-zone - The Availability Zone of the instance. event.code - The code identifying the type of event (instance-reboot | system-reboot | system-maintenance | instance-retirement | instance-stop). event.description - A description of the event. event.not-after - The latest end time for the scheduled event, for example: 2010-09-15T17:15:20.000Z. event.not-before - The earliest start time for the scheduled event, for example: 2010-09-15T17:15:20.000Z. instance-state-code - A code representing the state of the instance, as a 16-bit unsigned integer. The high byte is an opaque internal value and should be ignored. The low byte is set based on the state represented. The valid values are 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64 (stopping), and 80 (stopped). instance-state-name - The state of the instance (pending | running | shutting-down | terminated | stopping | stopped). instance-status.reachability - Filters on instance status where the name is reachability (passed | failed | initializing | insufficient-data). instance-status.status - The status of the instance (ok | impaired | initializing | insufficient-data | not-applicable). system-status.reachability - Filters on system status where the name is reachability (passed | failed | initializing | insufficient-data). system-status.status - The system status of the instance (ok | impaired | initializing | insufficient-data | not-applicable).

:name - (String) The name of the filter.

:values - (Array<) One or more filter values.

:next_token - (String) The next paginated set of results to return. (You received this token from a prior call.)

:max_results - (Integer) The maximum number of paginated instance items per response. The call also returns a token that you can specify in a subsequent call to get the next set of results. If the value is greater than 1000, we return only 1000 items. Default: 1000

:include_all_instances - (Boolean) When true , includes the health status for all instances. When false , includes the health status for running instances only. Default: false

:instance_ids - (Array<) One or more instance IDs. Default: Describes all your instances.

:filters - (Array<) One or more filters. architecture - The instance architecture (i386 | x86_64). availability-zone - The Availability Zone of the instance. block-device-mapping.attach-time - The attach time for an Amazon EBS volume mapped to the instance, for example, 2010-09-15T17:15:20.000Z. block-device-mapping.delete-on-termination - A Boolean that indicates whether the Amazon EBS volume is deleted on instance termination. block-device-mapping.device-name - The device name for the Amazon EBS volume (for example, /dev/sdh). block-device-mapping.status - The status for the Amazon EBS volume (attaching | attached | detaching | detached). block-device-mapping.volume-id - The volume ID of the Amazon EBS volume. client-token - The idempotency token you provided when you launched the instance. dns-name - The public DNS name of the instance. group-id - The ID of the security group for the instance. If the instance is in EC2-Classic or a default VPC, you can use group-name instead. group-name - The name of the security group for the instance. If the instance is in a nondefault VPC, you must use group-id instead. hypervisor - The hypervisor type of the instance (ovm | xen). iam-instance-profile.arn - The instance profile associated with the instance. Specified as an ARN. image-id - The ID of the image used to launch the instance. instance-id - The ID of the instance. instance-lifecycle - Indicates whether this is a Spot Instance (spot). instance-state-code - The state of the instance, as a 16-bit unsigned integer. The high byte is an opaque internal value and should be ignored. The low byte is set based on the state represented. The valid values are: 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64 (stopping), and 80 (stopped). instance-state-name - The state of the instance (pending | running | shutting-down | terminated | stopping | stopped). instance-type - The type of instance (for example, m1.small). instance.group-id - The ID of the security group for the instance. If the instance is in EC2-Classic or a default VPC, you can use instance.group-name instead. instance.group-name - The name of the security group for the instance. If the instance is in a nondefault VPC, you must use instance.group-id instead. ip-address - The public IP address of the instance. kernel-id - The kernel ID. key-name - The name of the key pair used when the instance was launched. launch-index - When launching multiple instances, this is the index for the instance in the launch group (for example, 0, 1, 2, and so on). launch-time - The time when the instance was launched. monitoring-state - Indicates whether monitoring is enabled for the instance (disabled | enabled). owner-id - The AWS account ID of the instance owner. placement-group-name - The name of the placement group for the instance. platform - The platform. Use windows if you have Windows instances; otherwise, leave blank. private-dns-name - The private DNS name of the instance. private-ip-address - The private IP address of the instance. product-code - The product code associated with the AMI used to launch the instance. product-code.type - The type of product code (devpay | marketplace). ramdisk-id - The RAM disk ID. reason - The reason for the current state of the instance (for example, shows "User Initiated [date]" when you stop or terminate the instance). Similar to the state-reason-code filter. requester-id - The ID of the entity that launched the instance on your behalf (for example, AWS Management Console, Auto Scaling, and so on). reservation-id - The ID of the instance's reservation. A reservation ID is created any time you launch an instance. A reservation ID has a one-to-one relationship with an instance launch request, but can be associated with more than one instance if you launch multiple instances using the same launch request. For example, if you launch one instance, you'll get one reservation ID. If you launch ten instances using the same launch request, you'll also get one reservation ID. root-device-name - The name of the root device for the instance (for example, /dev/sda1). root-device-type - The type of root device that the instance uses (ebs | instance-store). source-dest-check - Indicates whether the instance performs source/destination checking. A value of true means that checking is enabled, and false means checking is disabled. The value must be false for the instance to perform network address translation (NAT) in your VPC. spot-instance-request-id - The ID of the Spot Instance request. state-reason-code - The reason code for the state change. state-reason-message - A message that describes the state change. subnet-id - The ID of the subnet for the instance. tag:key=value - The key/value combination of a tag assigned to the resource, where tag:key is the tag's key. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. tenancy - The tenancy of an instance (dedicated | default). virtualization-type - The virtualization type of the instance (paravirtual | hvm). vpc-id - The ID of the VPC that the instance is running in. network-interface.description - The description of the network interface. network-interface.subnet-id - The ID of the subnet for the network interface. network-interface.vpc-id - The ID of the VPC for the network interface. network-interface.network-interface.id - The ID of the network interface. network-interface.owner-id - The ID of the owner of the network interface. network-interface.availability-zone - The Availability Zone for the network interface. network-interface.requester-id - The requester ID for the network interface. network-interface.requester-managed - Indicates whether the network interface is being managed by AWS. network-interface.status - The status of the network interface (available) | in-use). network-interface.mac-address - The MAC address of the network interface. network-interface-private-dns-name - The private DNS name of the network interface. network-interface.source-destination-check - Whether the network interface performs source/destination checking. A value of true means checking is enabled, and false means checking is disabled. The value must be false for the network interface to perform network address translation (NAT) in your VPC. network-interface.group-id - The ID of a security group associated with the network interface. network-interface.group-name - The name of a security group associated with the network interface. network-interface.attachment.attachment-id - The ID of the interface attachment. network-interface.attachment.instance-id - The ID of the instance to which the network interface is attached. network-interface.attachment.instance-owner-id - The owner ID of the instance to which the network interface is attached. network-interface.addresses.private-ip-address - The private IP address associated with the network interface. network-interface.attachment.device-index - The device index to which the network interface is attached. network-interface.attachment.status - The status of the attachment (attaching | attached | detaching | detached). network-interface.attachment.attach-time - The time that the network interface was attached to an instance. network-interface.attachment.delete-on-termination - Specifies whether the attachment is deleted when an instance is terminated. network-interface.addresses.primary - Specifies whether the IP address of the network interface is the primary private IP address. network-interface.addresses.association.public-ip - The ID of the association of an Elastic IP address with a network interface. network-interface.addresses.association.ip-owner-id - The owner ID of the private IP address associated with the network interface. association.public-ip - The address of the Elastic IP address bound to the network interface. association.ip-owner-id - The owner of the Elastic IP address associated with the network interface. association.allocation-id - The allocation ID returned when you allocated the Elastic IP address for your network interface. association.association-id - The association ID returned when the network interface was associated with an IP address.

:name - (String) The name of the filter.

:values - (Array<) One or more filter values.

:next_token - (String) The token for the next set of items to return. (You received this token from a prior call.)

:max_results - (Integer) The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results. If the value is greater than 1000, we return only 1000 items.

:filters - (Array<) One or more filters. attachment.state - The current state of the attachment between the gateway and the VPC (available). Present only if a VPC is attached. attachment.vpc-id - The ID of an attached VPC. internet-gateway-id - The ID of the Internet gateway. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter.

:filters - (Array<) One or more filters. association.association-id - The ID of an association ID for the ACL. association.network-acl-id - The ID of the network ACL involved in the association. association.subnet-id - The ID of the subnet involved in the association. default - Indicates whether the ACL is the default network ACL for the VPC. entry.cidr - The CIDR range specified in the entry. entry.egress - Indicates whether the entry applies to egress traffic. entry.icmp.code - The ICMP code specified in the entry, if any. entry.icmp.type - The ICMP type specified in the entry, if any. entry.port-range.from - The start of the port range specified in the entry. entry.port-range.to - The end of the port range specified in the entry. entry.protocol - The protocol specified in the entry (tcp | udp | icmp or a protocol number). entry.rule-action - Allows or denies the matching traffic (allow | deny). entry.rule-number - The number of an entry (in other words, rule) in the ACL's set of entries. network-acl-id - The ID of the network ACL. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-id - The ID of the VPC for the network ACL.

:filters - (Array<) One or more filters. addresses.private-ip-address - The private IP addresses associated with the network interface. addresses.primary - Whether the private IP address is the primary IP address associated with the network interface. addresses.association.public-ip - The association ID returned when the network interface was associated with the Elastic IP address. addresses.association.owner-id - The owner ID of the addresses associated with the network interface. association.association-id - The association ID returned when the network interface was associated with an IP address. association.allocation-id - The allocation ID returned when you allocated the Elastic IP address for your network interface. association.ip-owner-id - The owner of the Elastic IP address associated with the network interface. association.public-ip - The address of the Elastic IP address bound to the network interface. association.public-dns-name - The public DNS name for the network interface. attachment.attachment-id - The ID of the interface attachment. attachment.instance-id - The ID of the instance to which the network interface is attached. attachment.instance-owner-id - The owner ID of the instance to which the network interface is attached. attachment.device-index - The device index to which the network interface is attached. attachment.status - The status of the attachment (attaching | attached | detaching | detached). attachment.attach.time - The time that the network interface was attached to an instance. attachment.delete-on-termination - Indicates whether the attachment is deleted when an instance is terminated. availability-zone - The Availability Zone of the network interface. description - The description of the network interface. group-id - The ID of a security group associated with the network interface. group-name - The name of a security group associated with the network interface. mac-address - The MAC address of the network interface. network-interface-id - The ID of the network interface. owner-id - The AWS account ID of the network interface owner. private-ip-address - The private IP address or addresses of the network interface. private-dns-name - The private DNS name of the network interface. requester-id - The ID of the entity that launched the instance on your behalf (for example, AWS Management Console, Auto Scaling, and so on). requester-managed - Indicates whether the network interface is being managed by an AWS service (for example, AWS Management Console, Auto Scaling, and so on). source-desk-check - Indicates whether the network interface performs source/destination checking. A value of true means checking is enabled, and false means checking is disabled. The value must be false for the network interface to perform Network Address Translation (NAT) in your VPC. status - The status of the network interface. If the network interface is not attached to an instance, the status is available; if a network interface is attached to an instance the status is in-use. subnet-id - The ID of the subnet for the network interface. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-id - The ID of the VPC for the network interface.

:group_names - (Array<) One or more placement group names. Default: Describes all your placement groups, or only those otherwise specified.

:filters - (Array<) One or more filters. group-name - The name of the placement group. state - The state of the placement group (pending | available | deleting | deleted). strategy - The strategy of the placement group (cluster).

:reserved_instances_ids - (Array<) One or more Reserved Instance IDs. Default: Describes all your Reserved Instances, or only those otherwise specified.

:filters - (Array<) One or more filters. availability-zone - The Availability Zone where the Reserved Instance can be used. duration - The duration of the Reserved Instance (one year or three years), in seconds (31536000 | 94608000). end - The time when the Reserved Instance expires (for example, 2014-08-07T11:54:42.000Z). fixed-price - The purchase price of the Reserved Instance (for example, 9800.0). instance-type - The instance type on which the Reserved Instance can be used. product-description - The product description of the Reserved Instance (Linux/UNIX | Linux/UNIX (Amazon VPC) | Windows | Windows (Amazon VPC)). reserved-instances-id - The ID of the Reserved Instance. start - The time at which the Reserved Instance purchase request was placed (for example, 2014-08-07T11:54:42.000Z). state - The state of the Reserved Instance (pending-payment | active | payment-failed | retired). tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. usage-price - The usage price of the Reserved Instance, per hour (for example, 0.84).

:name - (String) The name of the filter.

:values - (Array<) One or more filter values.

:offering_type - (String) The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API version, you only have access to the Medium Utilization Reserved Instance offering type. Valid values include:

:filters - (Array<) One or more filters. client-token - The idempotency token for the modification request. create-date - The time when the modification request was created. effective-date - The time when the modification becomes effective. modification-result.reserved-instances-id - The ID for the Reserved Instances created as part of the modification request. This ID is only available when the status of the modification is fulfilled. modification-result.target-configuration.availability-zone - The Availability Zone for the new Reserved Instances. modification-result.target-configuration.instance-count - The number of new Reserved Instances. modification-result.target-configuration.instance-type - The instance type of the new Reserved Instances. modification-result.target-configuration.platform - The network platform of the new Reserved Instances (EC2-Classic | EC2-VPC). reserved-instances-id - The ID of the Reserved Instances modified. reserved-instances-modification-id - The ID of the modification request. status - The status of the Reserved Instances modification request (processing | fulfilled | failed). status-message - The reason for the status. update-date - The time when the modification request was last updated.

:reserved_instances_offering_ids - (Array<) One or more Reserved Instances offering IDs.

:instance_type - (String) The instance type on which the Reserved Instance can be used. For more information, see Instance Types in the Amazon Elastic Compute Cloud User Guide for Linux. Valid values include:

t1.micro

m1.small

m1.medium

m1.large

m1.xlarge

m3.medium

m3.large

m3.xlarge

m3.2xlarge

t2.micro

t2.small

t2.medium

m2.xlarge

m2.2xlarge

m2.4xlarge

cr1.8xlarge

i2.xlarge

i2.2xlarge

i2.4xlarge

i2.8xlarge

hi1.4xlarge

hs1.8xlarge

c1.medium

c1.xlarge

c3.large

c3.xlarge

c3.2xlarge

c3.4xlarge

c3.8xlarge

cc1.4xlarge

cc2.8xlarge

g2.2xlarge

cg1.4xlarge

r3.large

r3.xlarge

r3.2xlarge

r3.4xlarge

r3.8xlarge

:availability_zone - (String) The Availability Zone in which the Reserved Instance can be used.

:product_description - (String) The Reserved Instance description. Instances that include (Amazon VPC) in the description are for use with Amazon VPC. Valid values include:

Linux/UNIX

Linux/UNIX (Amazon VPC)

Windows

Windows (Amazon VPC)

:filters - (Array<) One or more filters. availability-zone - The Availability Zone where the Reserved Instance can be used. duration - The duration of the Reserved Instance (for example, one year or three years), in seconds (31536000 | 94608000). fixed-price - The purchase price of the Reserved Instance (for example, 9800.0). instance-type - The instance type on which the Reserved Instance can be used. marketplace - Set to true to show only Reserved Instance Marketplace offerings. When this filter is not used, which is the default behavior, all offerings from AWS and Reserved Instance Marketplace are listed. product-description - The description of the Reserved Instance (Linux/UNIX | Linux/UNIX (Amazon VPC) | Windows | Windows (Amazon VPC)). reserved-instances-offering-id - The Reserved Instances offering ID. usage-price - The usage price of the Reserved Instance, per hour (for example, 0.84).

:name - (String) The name of the filter.

:values - (Array<) One or more filter values.

:instance_tenancy - (String) The tenancy of the Reserved Instance offering. A Reserved Instance with dedicated tenancy runs on single-tenant hardware and can only be launched within a VPC. Default: default Valid values include:

default

dedicated

:offering_type - (String) The Reserved Instance offering type. If you are using tools that predate the 2011-11-01 API version, you only have access to the Medium Utilization Reserved Instance offering type. Valid values include:

Heavy Utilization

Medium Utilization

Light Utilization

:next_token - (String) The token to use when requesting the next paginated set of offerings.

:max_results - (Integer) The maximum number of offerings to return. The maximum is 100. Default: 100

:include_marketplace - (Boolean) Include Marketplace offerings in the response.

:filters - (Array<) One or more filters. association.route-table-association-id - The ID of an association ID for the route table. association.route-table-id - The ID of the route table involved in the association. association.subnet-id - The ID of the subnet involved in the association. association.main - Indicates whether the route table is the main route table for the VPC. route-table-id - The ID of the route table. route.destination-cidr-block - The CIDR range specified in a route in the table. route.gateway-id - The ID of a gateway specified in a route in the table. route.instance-id - The ID of an instance specified in a route in the table. route.origin - Describes how the route was created. CreateRouteTable indicates that the route was automatically created when the route table was created; CreateRoute indicates that the route was manually added to the route table; EnableVgwRoutePropagation indicates that the route was propagated by route propagation. route.state - The state of a route in the route table (active | blackhole). The blackhole state indicates that the route's target isn't available (for example, the specified gateway isn't attached to the VPC, the specified NAT instance has been terminated, and so on). route.vpc-peering-connection-id - The ID of a VPC peering connection specified in a route in the table. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-id - The ID of the VPC for the route table.

:group_names - (Array<) [EC2-Classic, default VPC] One or more security group names. You can specify either the security group name or the security group ID. Default: Describes all your security groups.

:group_ids - (Array<) One or more security group IDs. Required for nondefault VPCs. Default: Describes all your security groups.

:filters - (Array<) One or more filters. description - The description of the security group. group-id - The ID of the security group. group-name - The name of the security group. ip-permission.cidr - A CIDR range that has been granted permission. ip-permission.from-port - The start of port range for the TCP and UDP protocols, or an ICMP type number. ip-permission.group-id - The ID of a security group that has been granted permission. ip-permission.group-name - The name of a security group that has been granted permission. ip-permission.protocol - The IP protocol for the permission (tcp | udp | icmp or a protocol number). ip-permission.to-port - The end of port range for the TCP and UDP protocols, or an ICMP code. ip-permission.user-id - The ID of an AWS account that has been granted permission. owner-id - The AWS account ID of the owner of the security group. tag-key - The key of a tag assigned to the security group. tag-value - The value of a tag assigned to the security group. vpc-id - The ID of the VPC specified when the security group was created.

:snapshot_ids - (Array<) One or more snapshot IDs. Default: Describes snapshots for which you have launch permissions.

:owner_ids - (Array<) Returns the snapshots owned by the specified owner. Multiple owners can be specified.

:restorable_by_user_ids - (Array<) One or more AWS accounts IDs that can create volumes from the snapshot.

:filters - (Array<) One or more filters. description - A description of the snapshot. owner-alias - The AWS account alias (for example, amazon) that owns the snapshot. owner-id - The ID of the AWS account that owns the snapshot. progress - The progress of the snapshot, as a percentage (for example, 80%). snapshot-id - The snapshot ID. start-time - The time stamp when the snapshot was initiated. status - The status of the snapshot (pending | completed | error). tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. volume-id - The ID of the volume the snapshot is for. volume-size - The size of the volume, in GiB.

:spot_instance_request_ids - (Array<) One or more Spot Instance request IDs.

:filters - (Array<) One or more filters. availability-zone-group - The Availability Zone group. create-time - The time stamp when the Spot Instance request was created. fault-code - The fault code related to the request. fault-message - The fault message related to the request. instance-id - The ID of the instance that fulfilled the request. launch-group - The Spot Instance launch group. launch.block-device-mapping.delete-on-termination - Indicates whether the Amazon EBS volume is deleted on instance termination. launch.block-device-mapping.device-name - The device name for the Amazon EBS volume (for example, /dev/sdh). launch.block-device-mapping.snapshot-id - The ID of the snapshot used for the Amazon EBS volume. launch.block-device-mapping.volume-size - The size of the Amazon EBS volume, in GiB. launch.block-device-mapping.volume-type - The type of the Amazon EBS volume (gp2 | standard | io1). launch.group-id - The security group for the instance. launch.image-id - The ID of the AMI. launch.instance-type - The type of instance (for example, m1.small). launch.kernel-id - The kernel ID. launch.key-name - The name of the key pair the instance launched with. launch.monitoring-enabled - Whether monitoring is enabled for the Spot Instance. launch.ramdisk-id - The RAM disk ID. network-interface.network-interface-id - The ID of the network interface. network-interface.device-index - The index of the device for the network interface attachment on the instance. network-interface.subnet-id - The ID of the subnet for the instance. network-interface.description - A description of the network interface. network-interface.private-ip-address - The primary private IP address of the network interface. network-interface.delete-on-termination - Indicates whether the network interface is deleted when the instance is terminated. network-interface.group-id - The ID of the security group associated with the network interface. network-interface.group-name - The name of the security group associated with the network interface. network-interface.addresses.primary - Indicates whether the IP address is the primary private IP address. product-description - The product description associated with the instance (Linux/UNIX | Windows). spot-instance-request-id - The Spot Instance request ID. spot-price - The maximum hourly price for any Spot Instance launched to fulfill the request. state - The state of the Spot Instance request (open | active | closed | cancelled | failed). Spot bid status information can help you track your Amazon EC2 Spot Instance requests. For information, see Tracking Spot Requests with Bid Status Codes in the Amazon Elastic Compute Cloud User Guide for Linux. status-code - The short code describing the most recent evaluation of your Spot Instance request. status-message - The message explaining the status of the Spot Instance request. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. type - The type of Spot Instance request (one-time | persistent). launched-availability-zone - The Availability Zone in which the bid is launched. valid-from - The start date of the request. valid-until - The end date of the request.

:start_time - (String<) The start date and time of the Spot Price history data.

:end_time - (String<) The end date and time of the Spot Price history data.

:instance_types - (Array<) One or more instance types.

:product_descriptions - (Array<) One or more basic product descriptions.

:filters - (Array<) One or more filters. availability-zone - The Availability Zone for which prices should be returned. instance-type - The type of instance (for example, m1.small). product-description - The product description for the Spot Price (Linux/UNIX | SUSE Linux | Windows | Linux/UNIX (Amazon VPC) | SUSE Linux (Amazon VPC) | Windows (Amazon VPC)). spot-price - The Spot Price. The value must match exactly (or use wildcards; greater than or less than comparison is not supported). timestamp - The timestamp of the Spot Price history (for example, 2010-08-16T05:06:11.000Z). You can use wildcards (* and ?). Greater than or less than comparison is not supported.

:subnet_ids - (Array<) One or more subnet IDs. Default: Describes all your subnets.

:filters - (Array<) One or more filters. availabilityZone - The Availability Zone for the subnet. You can also use availability-zone as the filter name. available-ip-address-count - The number of IP addresses in the subnet that are available. cidrBlock - The CIDR block of the subnet. The CIDR block you specify must exactly match the subnet's CIDR block for information to be returned for the subnet. You can also use cidr or cidr-block as the filter names. defaultForAz - Indicates whether this is the default subnet for the Availability Zone. You can also use default-for-az as the filter name. state - The state of the subnet (pending | available). subnet-id - The ID of the subnet. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-id - The ID of the VPC for the subnet.

:max_results - (Integer) The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results. If the value is greater than 1000, we return only 1000 items.

:next_token - (String) The token for the next set of items to return. (You received this token from a prior call.)

:filters - (Array<) One or more filters. attachment.attach-time - The time stamp when the attachment initiated. attachment.delete-on-termination - Whether the volume is deleted on instance termination. attachment.device - The device name that is exposed to the instance (for example, /dev/sda1). attachment.instance-id - The ID of the instance the volume is attached to. attachment.status - The attachment state (attaching | attached | detaching | detached). availability-zone - The Availability Zone in which the volume was created. create-time - The time stamp when the volume was created. encrypted - The encryption status of the volume. size - The size of the volume, in GiB. snapshot-id - The snapshot from which the volume was created. status - The status of the volume (creating | available | in-use | deleting | deleted | error). tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. volume-id - The volume ID. volume-type - The Amazon EBS volume type. This can be gp2 for General Purpose (SSD) volumes, io1 for Provisioned IOPS (SSD) volumes, or standard for Magnetic volumes.

:name - (String) The name of the filter.

:values - (Array<) One or more filter values.

:next_token - (String) The NextToken value returned from a previous paginated DescribeVolumes request where MaxResults was used and the results exceeded the value of that parameter. Pagination continues from the end of the previous results that returned the NextToken value. This value is null when there are no more results to return.

:max_results - (Integer) The maximum number of volume results returned by DescribeVolumes in paginated output. When this parameter is used, DescribeVolumes only returns MaxResults results in a single page along with a NextToken response element. The remaining results of the initial request can be seen by sending another DescribeVolumes request with the returned NextToken value. This value can be between 5 and 1000; if MaxResults is given a value larger than 1000, only 1000 results are returned. If this parameter is not used, then DescribeVolumes returns all results.

:filters - (Array<) One or more filters. accepter-vpc-info.cidr-block - The CIDR block of the peer VPC. accepter-vpc-info.owner-id - The AWS account ID of the owner of the peer VPC. accepter-vpc-info.vpc-id - The ID of the peer VPC. expiration-time - The expiration date and time for the VPC peering connection. requester-vpc-info.cidr-block - The CIDR block of the requester's VPC. requester-vpc-info.owner-id - The AWS account ID of the owner of the requester VPC. requester-vpc-info.vpc-id - The ID of the requester VPC. status-code - The status of the VPC peering connection (pending-acceptance | failed | expired | provisioning | active | deleted | rejected). status-message - A message that provides more information about the status of the VPC peering connection, if applicable. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-peering-connection-id - The ID of the VPC peering connection.

:vpc_ids - (Array<) One or more VPC IDs. Default: Describes all your VPCs.

:filters - (Array<) One or more filters. cidr - The CIDR block of the VPC. The CIDR block you specify must exactly match the VPC's CIDR block for information to be returned for the VPC. Must contain the slash followed by one or two digits (for example, /28). dhcp-options-id - The ID of a set of DHCP options. isDefault - Indicates whether the VPC is the default VPC. state - The state of the VPC (pending | available). tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. vpc-id - The ID of the VPC.

:filters - (Array<) One or more filters. customer-gateway-configuration - The configuration information for the customer gateway. customer-gateway-id - The ID of a customer gateway associated with the VPN connection. state - The state of the VPN connection (pending | available | deleting | deleted). option.static-routes-only - Indicates whether the connection has static routes only. Used for devices that do not support Border Gateway Protocol (BGP). route.destination-cidr-block - The destination CIDR block. This corresponds to the subnet used in a customer data center. bgp-asn - The BGP Autonomous System Number (ASN) associated with a BGP device. tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. type - The type of VPN connection. Currently the only supported type is ipsec.1. vpn-connection-id - The ID of the VPN connection. vpn-gateway-id - The ID of a virtual private gateway associated with the VPN connection.

:filters - (Array<) One or more filters. attachment.state - The current state of the attachment between the gateway and the VPC (attaching | attached | detaching | detached). attachment.vpc-id - The ID of an attached VPC. availability-zone - The Availability Zone for the virtual private gateway. state - The state of the virtual private gateway (pending | available | deleting | deleted). tag:key=value - The key/value combination of a tag assigned to the resource. tag-key - The key of a tag assigned to the resource. This filter is independent of the tag-value filter. For example, if you use both the filter "tag-key=Purpose" and the filter "tag-value=X", you get any resources assigned both the tag key Purpose (regardless of what the tag's value is), and the tag value X (regardless of what the tag's key is). If you want to list only resources where Purpose is X, see the tag:key=value filter. tag-value - The value of a tag assigned to the resource. This filter is independent of the tag-key filter. type - The type of virtual private gateway. Currently the only supported type is ipsec.1. vpn-gateway-id - The ID of the virtual private gateway.

:force - (Boolean) Forces detachment if the previous detachment attempt did not occur cleanly (for example, logging into an instance, unmounting the volume, and detaching normally). This option can lead to data loss or a corrupted file system. Use this option only as a last resort to detach a volume from a failed instance. The instance won't have an opportunity to flush file system caches or file system metadata. If you use this option, you must perform file system check and repair procedures.

:group_name - (String) The name of the placement group the instance is in (for cluster compute instances).

:tenancy - (String) The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. Valid values include:

default

dedicated

:monitoring - (Boolean)

:subnet_id - (String) [EC2-VPC] The ID of the subnet to launch the instance into.

:instance_initiated_shutdown_behavior - (String) Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown). Valid values include:

stop

terminate

:private_ip_address - (String) [EC2-VPC] Optionally, you can use this parameter to assign the instance a specific available IP address from the IP address range of the subnet.

:attribute - (String) The name of the attribute. Valid values include:

instanceType

kernel

ramdisk

userData

disableApiTermination

instanceInitiatedShutdownBehavior

rootDeviceName

blockDeviceMapping

productCodes

sourceDestCheck

groupSet

ebsOptimized

sriovNetSupport

:value - (String) A new value for the attribute. Use only with the kernel, ramdisk, userData, disableApiTermination, or intanceInitiateShutdownBehavior attribute.

:block_device_mappings - (Array<) Modifies the DeleteOnTermination attribute for volumes that are currently attached. The volume must be owned by the caller. If no value is specified for DeleteOnTermination, the default is true and the volume is deleted when the instance is terminated. To add instance store volumes to an Amazon EBS-backed instance, you must add them when you launch the instance. For more information, see Updating the Block Device Mapping when Launching an Instance in the Amazon Elastic Compute Cloud User Guide.

:device_name - (String) The device name exposed to the instance (for example, /dev/sdh).

:ebs - (Hash) Parameters used to automatically set up Amazon EBS volumes when the instance is launched.

:no_device - (String) suppress the specified device included in the block device mapping.

:source_dest_check - (Hash) Specifies whether source/destination checking is enabled. A value of true means that checking is enabled, and false means checking is disabled. This value must be false for a NAT instance to perform NAT.

:value - (Boolean)

:disable_api_termination - (Hash) If the value is true , you can't terminate the instance using the Amazon EC2 console, CLI, or API; otherwise, you can.

:value - (Boolean)

:instance_type - (Hash) Changes the instance type to the specified value. For more information, see Instance Types. If the instance type is not valid, the error returned is InvalidInstanceAttributeValue.

:value - (String)

:kernel - (Hash) Changes the instance's kernel to the specified value. We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see PV-GRUB.

:value - (String)

:ramdisk - (Hash) Changes the instance's RAM disk to the specified value. We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see PV-GRUB.

:instance_initiated_shutdown_behavior - (Hash) Specifies whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown).

:value - (String)

:groups - (Array<) [EC2-VPC] Changes the security groups of the instance. You must specify at least one security group, even if it's just the default security group for the VPC. You must specify the security group ID, not the security group name. For example, if you want the instance to be in sg-1a1a1a1a and sg-9b9b9b9b, specify GroupId.1=sg-1a1a1a1a and GroupId.2=sg-9b9b9b9b.

:ebs_optimized - (Hash) Specifies whether the instance is optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.

:value - (Boolean)

:sriov_net_support - (Hash) Set to simple to enable enhanced networking for the instance. There is no way to disable enhanced networking at this time. This option is supported only for HVM instances. Specifying this option with a PV instance can make it unreachable.

:source_dest_check - (Hash) Indicates whether source/destination checking is enabled. A value of true means checking is enabled, and false means checking is disabled. This value must be false for a NAT instance to perform NAT. For more information, see NAT Instances in the Amazon Virtual Private Cloud User Guide.

:value - (Boolean)

:groups - (Array<) Changes the security groups for the network interface. The new set of groups you specify replaces the current set. You must specify at least one group, even if it's just the default security group in the VPC. You must specify the ID of the security group, not the name.

:attachment - (Hash) Information about the interface attachment. If modifying the 'delete on termination' attribute, you must specify the ID of the interface attachment.

:attachment_id - (String) The ID of the network interface attachment.

:delete_on_termination - (Boolean) Indicates whether the network interface is deleted when the instance is terminated.

:enable_dns_support - (Hash) Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" will succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled.

:value - (Boolean)

:enable_dns_hostnames - (Hash) Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. You can only enable DNS hostnames if you also enable DNS support.

:root_device_name - (String) The name of the root device (for example, /dev/sda1, or xvda).

:block_device_mappings - (Array<) One or more block device mapping entries.

:virtual_name - (String) The virtual device name (ephemeral[0..3]). The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume. Constraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI.

:device_name - (String) The device name exposed to the instance (for example, /dev/sdh).

:ebs - (Hash) Parameters used to automatically set up Amazon EBS volumes when the instance is launched.

:snapshot_id - (String) The ID of the snapshot.

:volume_size - (Integer) The size of the volume, in GiB. Constraints: If the volume type is io1, the minimum size of the volume is 10 GiB; otherwise, the minimum size is 1 GiB. The maximum volume size is 1024 GiB. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size. Default: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.

:iops - (Integer) The number of I/O operations per second (IOPS) that the volume supports. For Provisioned IOPS (SSD) volumes, this represents the number of IOPS that are provisioned for the volume. For General Purpose (SSD) volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information on General Purpose (SSD) baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types in the Amazon Elastic Compute Cloud User Guide. Constraint: Range is 100 to 4000 for Provisioned IOPS (SSD) volumes and 3 to 3072 for General Purpose (SSD) volumes. Condition: This parameter is required for requests to create io1 volumes; it is not used in requests to create standard or gp2 volumes.

:encrypted - (Boolean) Indicates whether the Amazon EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to instances that support Amazon EBS encryption.

:no_device - (String) Suppresses the specified device included in the block device mapping of the AMI.

:sriov_net_support - (String) Set to simple to enable enhanced networking for the AMI and any instances that you launch from the AMI. There is no way to disable enhanced networking at this time. This option is supported only for HVM AMIs. Specifying this option with a PV AMI can make instances launched from the AMI unreachable.

:start_time - (String<) The time at which the reported instance health state began.

:end_time - (String<) The time at which the reported instance health state ended.

:reason_codes - required - (Array<) One or more reason codes that describes the health state of your instance. instance-stuck-in-state: My instance is stuck in a state. unresponsive: My instance is unresponsive. not-accepting-credentials: My instance is not accepting my credentials. password-not-available: A password is not available for my instance. performance-network: My instance is experiencing performance problems which I believe are network related. performance-instance-store: My instance is experiencing performance problems which I believe are related to the instance stores. performance-ebs-volume: My instance is experiencing performance problems which I believe are related to an EBS volume. performance-other: My instance is experiencing performance problems. other: [explain using the description parameter]

:description - (String) Descriptive text about the health state of your instance.

:valid_from - (String<) The start date of the request. If this is a one-time request, the request becomes active at this date and time and remains active until all instances launch, the request expires, or the request is canceled. If the request is persistent, the request becomes active at this date and time and remains active until it expires or is canceled. Default: The request is effective indefinitely.

:valid_until - (String<) The end date of the request. If this is a one-time request, the request remains active until all instances launch, the request is canceled, or this date is reached. If the request is persistent, it remains active until it is canceled or this date and time is reached. Default: The request is effective indefinitely.

:availability_zone_group - (String) The user-specified name for a logical grouping of bids. When you specify an Availability Zone group in a Spot Instance request, all Spot Instances in the request are launched in the same Availability Zone. Instance proximity is maintained with this parameter, but the choice of Availability Zone is not. The group applies only to bids for Spot Instances of the same instance type. Any additional Spot Instance requests that are specified with the same Availability Zone group name are launched in that same Availability Zone, as long as at least one instance from the group is still active. If there is no active instance running in the Availability Zone group that you specify for a new Spot Instance request (all instances are terminated, the bid is expired, or the bid falls below current market), then Amazon EC2 launches the instance in any Availability Zone where the constraint can be met. Consequently, the subsequent set of Spot Instances could be placed in a different zone from the original request, even if you specified the same Availability Zone group. Default: Instances are launched in any available Availability Zone.

:launch_specification - (Hash) The launch specification.

:image_id - (String) The ID of the AMI.

:key_name - (String) The name of the key pair.

:user_data - (String) The Base64-encoded MIME user data to make available to the instances.

:group_name - (String) The name of the placement group (for cluster instances).

:kernel_id - (String) The ID of the kernel.

:ramdisk_id - (String) The ID of the RAM disk.

:block_device_mappings - (Array<) One or more block device mapping entries.

:virtual_name - (String) The virtual device name (ephemeral[0..3]). The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume. Constraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI.

:device_name - (String) The device name exposed to the instance (for example, /dev/sdh).

:ebs - (Hash) Parameters used to automatically set up Amazon EBS volumes when the instance is launched.

:snapshot_id - (String) The ID of the snapshot.

:volume_size - (Integer) The size of the volume, in GiB. Constraints: If the volume type is io1, the minimum size of the volume is 10 GiB; otherwise, the minimum size is 1 GiB. The maximum volume size is 1024 GiB. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size. Default: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.

:iops - (Integer) The number of I/O operations per second (IOPS) that the volume supports. For Provisioned IOPS (SSD) volumes, this represents the number of IOPS that are provisioned for the volume. For General Purpose (SSD) volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information on General Purpose (SSD) baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types in the Amazon Elastic Compute Cloud User Guide. Constraint: Range is 100 to 4000 for Provisioned IOPS (SSD) volumes and 3 to 3072 for General Purpose (SSD) volumes. Condition: This parameter is required for requests to create io1 volumes; it is not used in requests to create standard or gp2 volumes.

:encrypted - (Boolean) Indicates whether the Amazon EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to instances that support Amazon EBS encryption.

:no_device - (String) Suppresses the specified device included in the block device mapping of the AMI.

:monitoring - (Hash)

:enabled - required - (Boolean)

:subnet_id - (String) The ID of the subnet in which to launch the Spot Instance.

:network_interfaces - (Array<) One or more network interfaces.

:network_interface_id - (String) The ID of the network interface.

:device_index - (Integer) The index of the device on the instance for the network interface attachment. If you are specifying a network interface in a RunInstances request, you must provide the device index.

:subnet_id - (String) The ID of the subnet associated with the network string. Applies only if creating a network interface when launching an instance.

:description - (String) The description of the network interface. Applies only if creating a network interface when launching an instance.

:private_ip_address - (String) The private IP address of the network interface. Applies only if creating a network interface when launching an instance.

:groups - (Array<) The IDs of the security groups for the network interface. Applies only if creating a network interface when launching an instance.

:delete_on_termination - (Boolean) If set to true , the interface is deleted when the instance is terminated. You can specify true only if creating a new network interface when launching an instance.

:private_ip_addresses - (Array<) One or more private IP addresses to assign to the network interface. Only one private IP address can be designated as primary.

:private_ip_address - required - (String) The private IP addresses.

:primary - (Boolean) Indicates whether the private IP address is the primary private IP address. Only one IP address can be designated as primary.

:secondary_private_ip_address_count - (Integer) The number of secondary private IP addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option.

:associate_public_ip_address - (Boolean) Indicates whether to assign a public IP address to an instance you launch in a VPC. The public IP address can only be assigned to a network interface for eth0, and can only be assigned to a new network interface, not an existing one. You cannot specify more than one network interface in the request. If luanching into a default subnet, the default value is true .

:iam_instance_profile - (Hash) The IAM instance profile.

:arn - (String) The Amazon Resource Name (ARN) of the instance profile.

:ip_permissions - (Array<) A set of IP permissions. You can't specify a destination security group and a CIDR IP address range.

:ip_protocol - (String) The protocol. When you call DescribeSecurityGroups, the protocol value returned is the number. Exception: For TCP, UDP, and ICMP, the value returned is the name (for example, tcp, udp, or icmp). For a list of protocol numbers, see Protocol Numbers.

:from_port - (Integer) The start of port range for the TCP and UDP protocols, or an ICMP type number. A value of -1 indicates all ICMP types.

:to_port - (Integer) The end of port range for the TCP and UDP protocols, or an ICMP code. A value of -1 indicates all ICMP codes for the specified ICMP type.

:user_id_group_pairs - (Array<) One or more security group and AWS account ID pairs.

:user_id - (String) The ID of an AWS account.

:group_name - (String) The ID of the security group owned by the specified AWS account.

:group_id - (String) The name of the security group in the specified AWS account.

:ip_ranges - (Array<) One or more IP ranges.

:cidr_ip - (String) The CIDR range. You can either specify a CIDR range or a source security group, not both.

:ip_permissions - (Array<) A set of IP permissions. You can't specify a source security group and a CIDR IP address range.

:ip_protocol - (String) The protocol. When you call DescribeSecurityGroups, the protocol value returned is the number. Exception: For TCP, UDP, and ICMP, the value returned is the name (for example, tcp, udp, or icmp). For a list of protocol numbers, see Protocol Numbers.

:from_port - (Integer) The start of port range for the TCP and UDP protocols, or an ICMP type number. A value of -1 indicates all ICMP types.

:to_port - (Integer) The end of port range for the TCP and UDP protocols, or an ICMP code. A value of -1 indicates all ICMP codes for the specified ICMP type.

:user_id_group_pairs - (Array<) One or more security group and AWS account ID pairs.

:user_id - (String) The ID of an AWS account.

:group_name - (String) The ID of the security group owned by the specified AWS account.

:group_id - (String) The name of the security group in the specified AWS account.

:ip_ranges - (Array<) One or more IP ranges.

:cidr_ip - (String) The CIDR range. You can either specify a CIDR range or a source security group, not both.

:image_id - required - (String) The ID of the AMI, which you can get by calling DescribeImages.

:min_count - required - (Integer) The minimum number of instances to launch. If you specify a minimum that is more instances than Amazon EC2 can launch in the target Availability Zone, Amazon EC2 launches no instances. Constraints: Between 1 and the maximum number you're allowed for the specified instance type. For more information about the default limits, and how to request an increase, see How many instances can I run in Amazon EC2 in the Amazon EC2 General FAQ.

:max_count - required - (Integer) The maximum number of instances to launch. If you specify more instances than Amazon EC2 can launch in the target Availability Zone, Amazon EC2 launches the largest possible number of instances above MinCount. Constraints: Between 1 and the maximum number you're allowed for the specified instance type. For more information about the default limits, and how to request an increase, see How many instances can I run in Amazon EC2 in the Amazon EC2 General FAQ.

:key_name - (String) The name of the key pair. You can create a key pair using CreateKeyPair or ImportKeyPair. If you launch an instance without specifying a key pair, you can't connect to the instance.

:security_groups - (Array<) [EC2-Classic, default VPC] One or more security group names. For a nondefault VPC, you must use security group IDs instead. Default: Amazon EC2 uses the default security group.

:security_group_ids - (Array<) One or more security group IDs. You can create a security group using CreateSecurityGroup. Default: Amazon EC2 uses the default security group.

:group_name - (String) The name of the placement group the instance is in (for cluster compute instances).

:tenancy - (String) The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware. Valid values include:

default

dedicated

:kernel_id - (String) The ID of the kernel. We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see PV-GRUB in the Amazon Elastic Compute Cloud User Guide.

:ramdisk_id - (String) The ID of the RAM disk. We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see PV-GRUB in the Amazon Elastic Compute Cloud User Guide.

:block_device_mappings - (Array<) The block device mapping.

:virtual_name - (String) The virtual device name (ephemeral[0..3]). The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume. Constraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI.

:device_name - (String) The device name exposed to the instance (for example, /dev/sdh).

:ebs - (Hash) Parameters used to automatically set up Amazon EBS volumes when the instance is launched.

:snapshot_id - (String) The ID of the snapshot.

:volume_size - (Integer) The size of the volume, in GiB. Constraints: If the volume type is io1, the minimum size of the volume is 10 GiB; otherwise, the minimum size is 1 GiB. The maximum volume size is 1024 GiB. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size. Default: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.

:iops - (Integer) The number of I/O operations per second (IOPS) that the volume supports. For Provisioned IOPS (SSD) volumes, this represents the number of IOPS that are provisioned for the volume. For General Purpose (SSD) volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information on General Purpose (SSD) baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types in the Amazon Elastic Compute Cloud User Guide. Constraint: Range is 100 to 4000 for Provisioned IOPS (SSD) volumes and 3 to 3072 for General Purpose (SSD) volumes. Condition: This parameter is required for requests to create io1 volumes; it is not used in requests to create standard or gp2 volumes.

:encrypted - (Boolean) Indicates whether the Amazon EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to instances that support Amazon EBS encryption.

:no_device - (String) Suppresses the specified device included in the block device mapping of the AMI.

:subnet_id - (String) [EC2-VPC] The ID of the subnet to launch the instance into.

:disable_api_termination - (Boolean) If you set this parameter to true , you can't terminate the instance using the Amazon EC2 console, CLI, or API; otherwise, you can. If you set this parameter to true and then later want to be able to terminate the instance, you must first change the value of the disableApiTermination attribute to false using ModifyInstanceAttribute. Alternatively, if you set InstanceInitiatedShutdownBehavior to terminate, you can terminate the instance by running the shutdown command from the instance. Default: false

:instance_initiated_shutdown_behavior - (String) Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown). Default: stop Valid values include:

stop

terminate

:private_ip_address - (String) [EC2-VPC] The primary IP address. You must specify a value from the IP address range of the subnet. Only one private IP address can be designated as primary. Therefore, you can't specify this parameter if PrivateIpAddresses.n.Primary is set to true and PrivateIpAddresses.n.PrivateIpAddress is set to an IP address. Default: We select an IP address from the IP address range of the subnet.

:client_token - (String) Unique, case-sensitive identifier you provide to ensure the idempotency of the request. For more information, see How to Ensure Idempotency in the Amazon Elastic Compute Cloud User Guide. Constraints: Maximum 64 ASCII characters

:additional_info - (String) Reserved.

:network_interfaces - (Array<) One or more network interfaces.

:network_interface_id - (String) The ID of the network interface.

:device_index - (Integer) The index of the device on the instance for the network interface attachment. If you are specifying a network interface in a RunInstances request, you must provide the device index.

:subnet_id - (String) The ID of the subnet associated with the network string. Applies only if creating a network interface when launching an instance.

:description - (String) The description of the network interface. Applies only if creating a network interface when launching an instance.

:private_ip_address - (String) The private IP address of the network interface. Applies only if creating a network interface when launching an instance.

:groups - (Array<) The IDs of the security groups for the network interface. Applies only if creating a network interface when launching an instance.

:delete_on_termination - (Boolean) If set to true , the interface is deleted when the instance is terminated. You can specify true only if creating a new network interface when launching an instance.

:private_ip_addresses - (Array<) One or more private IP addresses to assign to the network interface. Only one private IP address can be designated as primary.

:private_ip_address - required - (String) The private IP addresses.

:primary - (Boolean) Indicates whether the private IP address is the primary private IP address. Only one IP address can be designated as primary.

:secondary_private_ip_address_count - (Integer) The number of secondary private IP addresses. You can't specify this option and specify more than one private IP address using the private IP addresses option.

:associate_public_ip_address - (Boolean) Indicates whether to assign a public IP address to an instance you launch in a VPC. The public IP address can only be assigned to a network interface for eth0, and can only be assigned to a new network interface, not an existing one. You cannot specify more than one network interface in the request. If luanching into a default subnet, the default value is true .

:iam_instance_profile - (Hash) The IAM instance profile.

:arn - (String) The Amazon Resource Name (ARN) of the instance profile.

:force - (Boolean) Forces the instances to stop. The instances do not have an opportunity to flush file system caches or file system metadata. If you use this option, you must perform file system check and repair procedures. This option is not recommended for Windows instances. Default: false